Collaborate Disseminate
What are the security risks that someone using HTTPS (everywhere) + DoH is vulnerable to, comparing to someone using a "thrusted" VPN?
Continue reading What does using a VPN offers over HTTPS + DoH in terms of protection?
Sorry for my lack of terminology in the field, that’s something I’ve little (or none any) practical knowledge about.
I’ve browsed similar questions on the security risks of using (web) proxies, but both the questions and the answers genera… Continue reading Is it worth using an http proxy?
I have been looking for cloud based proxies, and I notice that it’s very common to authenticate to a proxy using basic auth over an unencrypted connection. I don’t understand why this is considered acceptable.
Is proxy authentication diffe… Continue reading Is basic HTTP proxy authentication secure?
I understand the basics of security, lingo, certificates etc. I have run into numerous websites that still use HTTP but that puts into question encryption, security, surveillance, and interception.
If one uses a proxy website such as &quo… Continue reading Encryption Website Proxy Browser
We have an Apache web server with load balancer and we are planning to upgrade our TLS version from 1.1 to 1.2 due to chrome compatibility issues.
Currently the load balancer has TLSv1.1 and TLSv1.2 configured and the web server has TLSv1…. Continue reading TLS with load balancer and Web server
I’m trying to discover what cipher suites are being offered by my corporate proxy. It’s set up as a man in the middle so my "secure" connections are to it, and it attempts to create a secure connection to my target.
Specifically… Continue reading Is it possible to view the cipher suites offered on my behalf by a MITM proxy?
I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can intercept other apps on my device but I a… Continue reading Intercept HTTP Traffic of an android app?
I’m implementing client certificate authentication. My server is behind a proxy to which I have no control of. And also I don’t have any control over the client side communication. During every request, the client side sends an additional … Continue reading Verifying client certificate by passing client cert in the header
If a webapp sends Cache-Control: private it shouldn’t be cached for example with nginx proxy_cache. What could happen if it was cached anyhow? Could another visitor see the personalized login of another user? Might another visitor then bei… Continue reading Can server-side caching misconfiguration lead to stolen logins?
I have set up Burp proxy to intercept requests of an Android app. I am able to intercept app API calls except for live video streams. I am not aware of how the video stream is implemented but assuming there should be WebSocket or HTTP requ… Continue reading Burp not intercepting live video stream